security: fixed tokens