use the named route for posted_search
Changed secret token and now allow it to be overwritten by setting ENV['SECRET_TOKEN']