Add a secret_key_base for staging

not secure but not relevant for this usecase (deployed on vagrantbox only)