use SecurityToken in the edit form