fixing secret token