Missing rights for secret_token.rb