updated app security via various secret tokens