When in production the SECRET_KEY must be retrieved from the environment