change user secret logic