remove secret token, replace with an example file
secret_token instructions
force ssl