Raise during startup when config is invalid

Also drop default SECRET_KEY, which wasn't very secret.
Fixes #8.
simplify if log_file not empty

not None, != '' can be checked implicitly.