added logintoken to notsafe scope