Token should be read from environment variable

[ghost]

Having the token in the command line poses a security risk as it can be viewed in process lists.

It should get the token from an environment variable instead.

[Apexal]

This will be in the rewrite.