added secret to hash, cant post without loggin in