try with just one secure token