fixed a bug in secret_token.rb - spelled 'config' wrong