fix decryptToken bug