moved `record_token_mix` and `url_token_mix` to modelmix.sec module. Added tests.