token mechanism