sanitize android token as well