app take token and secert and stores it