simpler

need <?php, also move secrets to its own file....