Use ENV with secret_token