added secure flag to MAC token generation