add dummy secret token for dev use