added secret token code