Why Bother with Security Tokens?