Remove hard-coded secret from codebase

[aenyeart]

Proposed Solution:

1. Generate new test user token to replace the one currently exposed to public on GH
2. Set that token secret to a .env variable instead
3. Add secret to Netlify deployment
4. Share the .env content with team in Resources