REST token substitution