heroku changes
remove hard coded secret