token handling startegies