adding back secret token