hide secret token

via figaro gem and ENV variable