link to readme for secure token instructions