turns out hard-coding a "good token" is not such a good idea, as they do expire eventually