fixing secret token configuration