secret token validatable as per environment
root added to products
validate user action created in appln and product controller
dropbox integrated