app: don't use environment variable for Google endpoint
readme: improve instructions, add SECRET_KEY environment variable