hide my token from code