[bb10] Fix token matching between approved hosts.

This key comparion isn't working between approved clients. and
we send a secret to a clients  who are approved.