secret_token now loads from secret file