Bump token version.

Minor security fix in 1.3