remove duplicate setting of secret_token