move the secret to an environment variable
migrate from sqlite to mysql