Security level higher.
change auth.js
and loginToken.js