hid rails secret token