Add security no-token