fix userToken.js for apiUrl with path