Move secret token into environment variable