using ns2link as issuer in token