Redirect with token+userID