Move secret key to config.yml