moved keys out of server.js