make all urls go to default page
turn off debug mode // make secret_key load from environ variable