tokenized credentials