add dotenv gem to manage secrets