dynamically generate secret token; rspec installed