bucket moved above credentials in production.rb