Security token misconceptions

security token misconceptions