yes you can. understand that the first response also creates a datatable.
So in order to get the value of the first response, you have to PEEK the value from the datatable.
After that you take this peeked value which you put in a variable, and send it in the next request.
I do the following in my own app:
LIB CONNECT TO 'Json EndPoint';
RestConnectorMasterTable: SQL SELECT "sid" FROM XML "response";
[response]: LOAD [sid] AS [sid] RESIDENT RestConnectorMasterTable;
//read the response:
Let vSomething = peek('sid',0,'RestConnectorMasterTable');
DROP TABLE RestConnectorMasterTable;
LIB CONNECT TO 'EndPoint2';
RestConnectorMasterTable: SQL SELECT "__KEY_results", (SELECT FROM "meta"), (SELECT (SELECT "attr:k" AS "k", "__KEY_field", "__FK_field_u0", (SELECT "text", "__FK_value" FROM "value" FK "__FK_value") FROM "field" PK "__KEY_field" FK "__FK_field_u0") FROM "result" PK "__KEY_result" FK "__FK_result") FROM XML "results" PK "__KEY_results" WITH CONNECTION( Url "https://........:....../services/search/jobs/$(vSomething )/results" ) ;
For the part on your question to remove the token from your initial request. never done that before (i am the only Qlik developer in my company..) This is a hunch, but i think its worth a try. perhaps you can remove it via the QMC in the dataconnections. If you open your connection you can see and edit your Connection string.
To completly build your request search the community or google with the "With Connection" function, you can change everything from your request.
I only got this example in SOAP I use for you:
I first created my body and put it into a variable
Set vRequestBody = '<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:emp="https://...../...."><soapenv:Header><emp:AuthHeader><emp:Username>$(vUser)</emp:Username><emp:Token>$(vToken)</emp:Token></emp:AuthHeader></soapenv:Header><soapenv:Body><emp:GetList><emp:EmployeeId>$(vEmployee)</emp:EmployeeId><emp:Year>$(vYear)</emp:Year></emp:GetList></soapenv:Body></soapenv:Envelope>';