Use ENV['SECRET_KEY_BASE'] if is set.

This allows you to set ENV['SECRET_KEY_BASE'] for encrypting the cookie
and Rails will pick it up automatically, like DATABASE_URL.