Object-token individuation protects targets from object substitution masking