more xml request, find token web ui