[secret] fix prod mongodb url