Pull secret token from environment on heroku