changed secret_token and added rspec