Fixes #1 moving secret token out of version control and into env var