credential token ok