store secret key in ENV for production

Change-Id: I1c1eaba136e6a7c2df56ad58bf62be9cf7d5a780