secret key base

leaving secret key base in plain view poses a security threat

let's use secret key base from config