updated secret token to be secret