Use environment variables for tokens etc

...to facilitate Heroku deployment.