moves secret token to ENV
adds pry