'Secret Token' - oh yeah security vulnerabilities!