updated SECRET_KEY setting to use environment variable