possible secret token fix