Move secret token to config file.