add secret token to regenerate