added secret token for now because of heroku problems