Switched environment variable for cookie secret

Heroku automatically sets a variable named SECRET_KEY_BASE, so
we might as well use it.