fix to secret token