token (as obtained from js keycloak object):