Fix secret_token vulnerability #296

I think, now, it's fixed :santa: