SECRET_KEY should be an environment variable