- add "@" to allowed token characters