get the user token

You can replace that with CB Auto Actions and its Request action with the below initial setup.

Plan Active
Global
Triggers: onCPayUserStateChange
User: Automatic
Access: Everybody
Conditions
1: [var3] Equal To PLAN_ID_HERE
2: [var2] Equal To A

Plan Expired
Global
Triggers: onCPayUserStateChange
User: Automatic
Access: Everybody
Conditions
1: [var3] Equal To PLAN_ID_HERE
2: [var2] Not Equal To A

Alternatively I suppose a Code field with the below API usage could be used to output it. You'd then substitute in the code field.

www.joomlapolis.com/forum/149-usage/237307-get-the-user-token?limitstart=0#297055

Ok I think my head just split open after that last response hold on I think there is something I didn't explain properly;

The field cb_token actually has the correct value in it so if for example if I set it in the body section as
1=[cb_token] instead of [cb_token] = 1 the substitution will work correctly the problem is it doesn't work at all, in reverse.

Let me try and set up the auto action as well I just have a lot of auto actions.

Substitutions are not applied to the GET or POST key in CBSubs URL, which is what you're trying to do using [cb_token]=1. It's too dangerous to allow user supplied values to set GET or POST keys, which is why substitutions are disabled for them.

"It's too dangerous to allow user supplied values to set GET or POST keys, which is why substitutions are disabled for them." does this apply to keys in auto actions as well?

"It's too dangerous to allow user supplied values to set GET or POST keys, which is why substitutions are disabled for them." does this apply to keys in auto actions as well?

Yes.

Is there another way I can post the token to the url? Maybe via placing the full input tag on the registration form?