added secret into headers