securing our previously public secret token