User-agent: * Disallow: /token/*