Secret token should be secret

This is already on production.
Merge pull request #1062 from elzj/sekrit_token

Secret token should be secret