no need to ensure token any more, nor any method to do it either