Default to reading the secret token from the environment

Mitigation for the issue reported by Oscar Alsing.