Token could be empty string