add a readonly public token for composer