fix secret tokens