Change secret token to ENV