Security key should not be hardcoded so moving to config. This should be moved later to ENV variables(security practice)