fixed secret_token problem