add secret token generation logic
add rspec and some gems for testing