use a random secret key in production
initial import for github