secret_key_base (should be in chef, todo)