missed generate_secret_token