Use a static secret key for tokens, when none is given
Use a static secret key for tokens, when none is given

When the user doesn't specify SECRET_KEY, `app.secret_key` is None, not
a per-session value as one might hope.  In this case, tokens are
generated using a non-secret secret.  This is good for development, but
not for production, so the code issues a warning, too.

mozilla-releng/services,andrei987/services,srfraser/services,srfraser/services,mozilla/build-relengapi,Callek/build-relengapi,La0/mozilla-relengapi,lundjordan/build-relengapi,andrei987/services,lundjordan/services,djmitche/build-relengapi,lundjordan/build-relengapi,srfraser/services,La0/mozilla-relengapi,lundjordan/build-relengapi,Callek/build-relengapi,andrei987/services,mozilla-releng/services,mozilla-releng/services,lundjordan/services,La0/mozilla-relengapi,mozilla/build-relengapi,djmitche/build-relengapi,hwine/build-relengapi,lundjordan/services,hwine/build-relengapi,mozilla/build-relengapi,srfraser/services,garbas/mozilla-releng-services,garbas/mozilla-releng-services,andrei987/services,La0/mozilla-relengapi,hwine/build-relengapi,Callek/build-relengapi,djmitche/build-relengapi,mozilla/build-relengapi,lundjordan/services,garbas/mozilla-releng-services,Callek/build-relengapi,djmitche/build-relengapi,mozilla-releng/services,lundjordan/build-relengapi,garbas/mozilla-releng-services,hwine/build-relengapi