move token to controller