change session token to be stored in an environment variable