forgot to actually add token to URL