Add secret_key so that form actions work properly (closes #42)