changes to secret_token