adding readme note about SECRET_KEY stuff