secret_token.rb replaced with env var