secured the secret token