must have required property 'token'