add comment on where we set token in browser tab