SECRET_TOKEN set to environment variable