convert token to SHA2