fixing secret_token for heroku