tokenize
keeping the secret in seperate file