correct the git repository url

and hide the github token by using environment variable