adding secret token