use dummy token, secret when test environment