make token strategy also require the prescense of the client