fix pcc bug
truncate token for security