updated secret token to use env variable