look for a token in the query params