encrypt box tokens

fixes PLAT-531

test plan:
*the app doesn't break