Adding environment variable for secret token
Fixing Cross Site Scripting issue