Only return the Token, not secret after post request, remove debugging statements.