create a secret token on deploy