fix secret_token initialization