add secret token file