sec-tok-workaround 2