the encryption key for heroku server is now set as an enviromental variable