Document how we use a unique SECRET_KEY in production

Closes http://openhatch.org/bugs/issue820