hide SECRET_TOKEN by using ENV and dotenv
Merge branch 'fix/hide_secret_token'