secret token stuff

Signed-off-by: Danielle Bakhazi <danielle.bakhazi@gmail.com>