add secret_base_key to application.rb