secret token
fixed secret token code and added Rspec tests