makes JWT secret an environment variable