secure token retained