fixed secret token file