added token decryption