Use more secure secret token