deploy: set secret_key on setup