documenting read only tokens and logout.