put Coveralls token into environment variable to keep it hidden