criticial bug where secret key was embedded in the settings