diff --git a/backend/access_token.py b/backend/access_token.py
index 6a9bbd4..bed7273 100644
--- a/backend/access_token.py
+++ b/backend/access_token.py
@@ -1,11 +1,17 @@
 import json
+import os
 import httpx
 
 
 async def validate_access_token(access_code: str):
     async with httpx.AsyncClient() as client:
         url = "http://localhost:8000/screenshot_to_code/validate_access_token"
-        data = json.dumps({"access_code": access_code})
+        data = json.dumps(
+            {
+                "access_code": access_code,
+                "secret": os.environ.get("PICO_BACKEND_SECRET"),
+            }
+        )
         headers = {"Content-Type": "application/json"}
 
         response = await client.post(url, content=data, headers=headers)