Why the fuck is my user token in here? Shouldn't this be in the environment variables?