fixed typo in secret token