still trying to prevent adding secret token