improve secret token