how to pass token to api