secret_token initialization fixed