secret token replaced and fixed