we now get the secret_key from a file instead of hardcoding it into the configuration
we will now only send mails to admins when the config says so