Yes , Tokens has to be persisted. And yes I'm not really happy with  the ``` Credential ``` object, it's a bit of overlap with the ``` Developer ```, object let me see if can refactor that.