I've changed the password 3 times. Each time from a different pc and even changed it once from my tablet and they are still logging on to his character. I have already bought him a security token. I tried the software token but for some reason it's telling me his ID/Bday don't match (lol?)

Is there no choice but to wait until the physical token gets shipped?