delete token + crypt pass