set secret token as environment variable to deploy in heroku