token controller working