Moved secret token to application.yml