make sure people reset secret token so that we don't have tons of apps with the same token