Fixed a security issue that able to get encrypted password and token