read token from env