change pass by post, link to token