replace secret token and undo revert