Update to use ENV for SECRET_TOKEN