move allowed tokens to template