Token now sent on url req