fixing secret token for heroku