SECRET_KEY now coming from environment variable