add tests to validate changing secret