Add JWT_SECRET

Companion PR to hummingbird-me/hummingbird#322