remove restricted access for token