prompt user for token