Use environment variable to define secret_token and secret_key_base

Fix #13