use first identity as default when creating tokens