Secret key base

Making sure the secret key base is set through a mechanism that
isn't stored in the git repository in production.