Client to obtain security tokens from different sources