put tokenverifier specifics in message for security