fixed secret_token file to work locally and in heroku