secret token loading