add back application secret_token