fixing security bug -- no longer storing secret_key_base in repo