removed secret key from config file, setup secret key for production