Don't track secret_token