use environment based secret_token for easier bootstrapping of dev envs