add secret to params
user secrets
Merge pull request #9 from CirrusMio/secret

restrict by secret