add secret token to widget player + allow streaming and make track public after import