moved nonsecretkey. it wasn't being used anyway, but still.