secret_key = b"1234" # XXX - Should be in config (not in source, but stable across restarts)