If no environment SECRET_KEY, fail cleanly and securely if not DEBUG, ignore if DEBUG

@carlio This seem a sufficient and suitable addition to #1 to you?