remove secret_token from version control