adding configurable secret key option, readme, and test

This should resolve https://github.com/krakenjs/lusca/issues/29
Not exactly. `SECRET` is [still used](https://github.com/grawk/lusca/blob/a871c0a7f2b6641fb882d2b902b0910f6ac60b7b/lib/token.js#L47) in `validate`