change the way we get secret tokens (put in .ini instead of in the code)