moving secret token out to environment variable