setting up secrets