remove SECRET_KEY, again