fixed secret_token boilerplate, added rspec test suites