Yeah, phone tokens are fun like that. When you first set up a security token you are given a password that you are almost guaranteed to ignore, forget or lose. If miraculously you still have it you should be able to bypass the token to log into the website. If you don't you're gonna have a fun time on a phone call with customer support.