secures token file