Security issues token manager implementation