location has_many offers, dont ignore secret token