Use environment variable for secret token