JWT secret is an environment variable