Only use the GITHUB_API_TOKEN if it's not empty

Also, for consistency use ENV[TOKEN_KEY] across the board.