config: Fix NPE if application.secret is not set.