hide store token and id (even if they were fakes)