I'm fairly certain you will want to encrypt the token