fixed the :deprecated_secret_token config attr