Remove cookie serializer key from github

Moved the secret key to a separate python file which
is listed in .gitignore so that it isn't upload to
github.
Merge branch 'hide-secret-key' into develop
Merge branch 'develop'