make use of RackMojAuth::Resources::SECURE_TOKEN and ENV['API_HOST'] instead of hard-coded values