body should have required property 'token'