updated secret token script