added a setting for the SSO secret