use environment variable for secret keys on production