token create saving to db, but not checking if exists already