make secret token more secure