save token to db