adding secret_token.rb