Thanks for your nice article, for security reasons it’s better to use some kind of hashing on the `token` and then store it.