Use SECRET_TOKEN environment variable in production