makes the secret_token and resque password private