cleaned up token config on express side