make sure that token is unique