Why is this called "token" and not "hash"?