fix secret token