hid secret key
added error message for when SECRET_KEY isn't set
fixed typo