unique constraint on token