use process.env.TOKEN too communicate with controller