removing secret token from version control