use hook url, not domain + token