added back secrets, moving to env vars