use dotenv in secret_token.rb