check for application.secret being configured properly

resolves #134