Add token security feature to users