token ready required before controller action