put the secret token in a ENV variable
add a env example