fixed token so it actually increments the secret