remove SECRET_KEY from config.py for realz this time