secure with secret token
install rspec