sends reject if the secret does not match