oops
secret token initializer