update with secure token