allow token use