invalidated old SECRET_KEY, set new w/ env vars