Removed hardcoded secret_token. Updated REadme
Fixed ENV var bug for heroku