Added secret key and CORS_WHITELIST