moved secret key to auth.json