What happens, if the security token received has no parts? I believe that this line or the line below will throw IndexOutOfRange. I doubt this would be your intention.