Moving secret token out to environment variable

This will increase the app security by moving the secret token outside of version control.