Set the token secret to an empty string so that it does not confuse the computeSignature method in HMAC_SHA1.java