hide server tokens