dynamic secret token and rspec init