JWT_SECRET=my-very-long-random-string-for-production