prepare for heroku
set up secret token