Avoid checking in the secret token (fixes #1)