Removing hidden-field hack for keyboard navigation
Moving newly-generated secret token to a environment variable