add dotenv and recheck-in secret_token