add #double_submit_token_hash to get only token_name and token_value
use custom token store