Secret token is needed for everything