Use an ENV variable for the secret token

Ref issue #30  i really meant issue #30