remove regitrable
use env variable for secret token