scaffold plus some secret token shit