secret_token pulls from ENV variable in prod