allows accessing token value from safe mode rendering

also added to_s method, just in case someone would do <%= token %>