tightened up the token resource