fixes #4988 - missing token in post_sync_url