Remove SESSION_SECRET from .awsbox.json

We now handle `SESSION_SECRET` outside of the `.awsbox.json` file.