re-encrypt token