I got lazy and used "hash" and "token" somewhat interchangeably -- replaced all usage of "token" with "hash", thanks.