adds new secret
removes old secret from secret_token file
puts secret in the session