secret_token fix