removed app secret key from salt for csrf cookie value to fix issue #25