minimal setup for token generation