fixed secret key to be case insensitive