set up proper settings for secret_token