Change secret token to ENV variable