fixed mistake on secure token