This happened to me today, SQEX KB documents even say the token is there to prevent the need to change your password and your account will not be flagged if you used the token. But for some reason they flag your account.