gen new secret_token and secure secret token