fix: use the same method like in gitlab to generate the secure token
Merge pull request #356 from pgolm/fix/secure_token

save secure token in .secret