Simplify config and make the secret token secret