add secret_token.rb (with dummy token)