Configurable secret

- The secret key is now passed to new and verify at runtime.