fix bug of security token