move secret key to .env