ALM-377 store secret_token for session in settings.yml