secureToken is required