Ensure we use a secret secret_key_base in production

I knew I forgot about something.