img_3334-1000x750-blur

Your implementation is leaking information about the token.