add secret_token.rb