moved app secret key from config.py to __init__.py