protect token info