move token parameter to the end of API request