update onepw.graffle: HKDF details, new token names