Secret token is hidden on production
Add flashing of notice