set secure randomly generated secret token