fix #2: generate random string to use as SECRET_KEY