removing secret key and adding as an env variable instead
Fixing application.conf so that the application.secret key is optional