rspec added and secret_token.rb changed