Update readme on how to set up app
Make the secret token a secret