Add notes about writing out the secret token