Use ENV var for secret_token
Add an anti spam based on how long visitor has been on the site