secure the token