adding secret token configuration