update readme for setting secret token