Query token now depends on the source IP