"non-invasive" changes to support token retrieval via GET

e.g., for api.cubesensors.com