using ENV[SECRET_KEY_BASE] as secret_key