Add a TODO for auth secret in register.php.

So I don't forget about it.

Signed-off-by: Thiago Farina <tfarina@chromium.org>