worst mistake an app can make is tying its success to a token