Look for better solution than app secret stored in config file

[mw44118]

Maybe there's a way to dynamically make and store the app secret.