secure token update