Using a hardware token