secret token functionality
updated TORs