secret token removed from settings.yml file