disabling token() method - using key/secret when no token available