created a config var for the secret token