lithium\security\validation\FormSignature::$_secret

protected static property

Must be set manually to a unique string i.e. wJalrXUtnFEMI/K7MDENG+bPxRfiCYEXAMPLEKEY

Source

	protected static $_secret = null;