empty secret token file uploaded