use environment variables for production status & secret key
update PEP8 ignore