added secret to play around with user accounts