Remove secret_token from public repository and require it be set on the server