add config for secret_key_base; closes #574