Use private secet_token in production environment