Fix setting secret token in production