this can reference RackMojAuth::Resources::SECURE_TOKEN instead of hard coded.