added non-secret SECRET_KEY