secure the secret token