put a example secret in config.js.example and put the local secret in config.js