A better way to handle the secret token