Block a user
remove bcrypt from registration key, use plain string comparison
remove bcrypt from registration key, use plain string comparison
store plaintext secret key in .env, hash at startup
store plaintext secret key in .env, hash at startup