set security token appropriately