add secret token to config vars