new URL /login for token creation;
code cleanup for token creation;