set_secure_token around filter now set via Author mixin