Change permissions on files
Implement simple token model and use an id to access existing tokens.