moved SECRET_TOKEN to environment variable