avoid to leak token