run security:generate_token only if token does not exist