make secret_token secret