Look for the secret token in the env in production.
Make sure the test/dev token is long enough.