create secret token environment variable