move devise's key and pepper to an env variable