include token in sql query