fixed some config problems, added an app secret generator