updated secret token to ENV