`unless secret` - This is the same as `if secret === nil`. 
From `secret = process.env.FLUMEN_SECRET || ''`, I can't see where secret gets set to `nil`. Empty string will not stop it.

Maybe `secret = process.env.FLUMEN_SECRET` or am I missing something?