set secret key as random typed string in place of urandom (caused password to be invalid after deploy)