quering resource server with token