added secret_token,rspec