comment out secret token check