update secret_token