update secret_token to be dynamic and random
fix secret_token update