Other solution: allow only one token at a time