Use ENV['SECRET_KEY_BASE'] if is set.

This allows you to set ENV['SECRET_KEY_BASE'] for tempering the cookie and
Rails will pick it up automatically, like DATABASE_URL.