remove secret token from version control
use alternative reddish color for active links