added secret-key for production (of course, it needs to be changed)