if i add permissions to a role that already has a token associated with it, do i need to create a new token?