moved Flask SECRET_KEY to config file. Added save method to User model.