refactor tokens so they're in a redis set