readding secret_token to AppConfig as it is no longer in app_config.yml