use faster / safer memset to clear out token_t