move secret key to a config var
About