use dynamic secret token