the SECRET_KEY is not a hash