add secret key when running with tornado