Use heroku ENV for secret info
Add back secret_token.rb