ENV config for new secret token & heroku config