[#345] mistype secret token
[#345] add attr_accessible to EventLog
[#345] fix api specs