add secret_token.rb.sample