secure tokens and update readme