make secret token work in dev
still not working, strangely