The token should never be seen by the end user, where did you see this? I fear i made a mistake :\