trying to get heroku to stop complaining about the secret token