docs: flask secret key

refs #36
fixes #46