Shared secret for discovery

[kevindeyne]

Since the initiation comes from the client apps, we need a system to prevent just anyone pointing to hydra and being able to connect to it. One such way would be to have a shared secret across apps. We should require this to be complex (min size 32 characters)