string to sign changes when adding the security token.