fresh encryption of the oauth token