use ENV for secret key and create new sample key as well