not sure why the encrypted token does not work