Update README.md
move secret token to a environment var