Maybe we should generate secret token before start the app...