experimenting with the secret_token and heroku