add secret token for heroku
test before deploying