adding secretkey security