Add a better match on testing generation of SECRET_KEY_BASE

Now we match against the number of characters and the app.

Do you guys know the difference between output and stdout?

@fgrehm @TiuTalk please take a look.