update to secret token