fix secret token and rspec