Config cleanup. Make app.secret obvious it is a development value