Set secret token from ENV in production and raise error if not done