support opts.token to override cookie token in browser