correct path for secret_token.rb