Pull the secret token out from the environment, so we can set it easily in server envs.