Moved hash-secret to config.js

The secret used in the sha256 hash is now configurable in via a
variable in the config-file