Use env for secret token in production