remove this secret_token