--- openapi: get /security/token ---