added token via cookie