Clarify `secret`

A user says this is confusing:

"secret: A session-generating secret, server-wide password."

This is the only place it is mentioned, and its description is meaningless to those who are not familiar with pump.io. Exactly what is this for?

See https://github.com/pump-io/pump.io/issues/1685.