Hide SECRET_TOKEN in .env file