include the secret token in the yml file