add better secret to .env, comment out rack_timeout setup