Put secret token in Heroku ENV variable to secure the app