fix typo in secret token