fix secret_token key