Moving secret_token to app_config