add the secret_token file so heroku can use it