security added (1-minute token)