default secret token added