Change secret token to environment variable