app will now use ENV hash for secret token when in deployment for better security