manually set secret key base without env vars