Remove hardcoded secret token