second commit, generating secret app keys