Allows setting secret token via ENV var