add security_token settings