rename secret_token to secret_key_base