added secret_token method