secret_token generation added