fetch token and secret from config file