Use environment variable for secret_token