How did they get past your security token?