add secret token to avoid rail server error