What is a token, really?