changed config.secret_key_base to ENV variable