minor fix in url patterns
update secret key during installation