updated token to use key/secret pair