testing secret tokens