dont hidden tokenauth file