configured secret_token and rspec