For me, it sends me to a secondary login page that asks specifically for the Symantec VIP or hardware token. If they are appending it to the end of my password, it's not evident to me.