move secret token into redis to ease install