now allow variable-length token