Add a Security reminder

Yeah, reset that secret_token.