This is scary we can't have our token in plain text here may be you base64encode it