Create a Signing Key. Do not add ampersand symbol if token secret is empty