use correct var for secret key