so now you need to decode the token to get it