Improves app.json

- Adds note about redirect_uri in readme and app.json
- Fixes SECRET_KEY -> SECRET_KEY_BASE