secret token changed and secret again