removes secret token