setting secret token