Add warn about SECRET_KEY