fixed token which prevented login