secret token fix