adding sample secret token (use ENV though)