made secret token env variable