Avoid leaking tokens

lib/security.php

@@ -112,7 +112,7 @@
 						$_SESSION['secret_key'] = $u['secret_key'];
 						$r = true;
 					}else{
-						$r = __("Token didn't match ").$u['secret_key'];
+						$r = __("Token didn't match");
 					}
 				break;
 				default:
@@ -273,4 +273,4 @@
 		$finalhash = pack("H*", sha1($firsthash.$salt));
 		return "$".base64_encode($salt)."$".base64_encode($finalhash);
 	}
-?>
+?>