renamed salt to token