add requirements for tests and tweak how the secret key gets set