add security info and try to fix auth token renewal problem