adding secret to app