removing http pass and secret token