private secret_token