Using environment variable for token to avoid leaking valid access tokens