http://simple.app/blog/security-tokens