[hot-fix] security token revealed