Add secure token and rspec