moving secret token to the right place