Use an env variable in production for secret token