Removed default secret key.

We should prevent secret key being written into version control system.
By having a secret key version controlled in utils.py will encourage
users to make that mistake.

401 tests are now commented out. We need to inject the backend-key or restart
the server during the tests.