changing secret_token to be env variable