JWT_SECRET=change-me-to-a-long-random-value