updated description and use about the 'token' received from the authorize call