add webapp secret token that pulls from hiera a 'secret'