do not send token back