reverted webui auth_secret to default