added rspec and secret token stuff