JWT_SECRET=change-me-in-production