You're absolutely right. No idea why I switched it back to `/token`.