change secure_token