store secret_key_base in an environment variable