Fix secret being printed in create.php