fixed secret token display