the android security token was horrible for the last three weeks (I don't know what the state of affairs is on it now). But the passwords would not match from the token to your client.