add rspec and refactor secret_token which create random token
improve the README