updated secret token and rspec