put secret key in prod file (not env file)