fixed secret token issue