fixed bug in check_secret in server.py