moved secret token into foreman .env and heroku config var