Put complete URL into secure ENV, because only the token didn't work as expected