edit token method and add permission again
fix storage