change when secret_token is generated