Fix app config

- add missing api key to config
- make api key lookup happen in config
- convert secret_key to string