Generate secret token if environment variable is not set