add readme; move secret to env_var