remove secret token from version control