Require ENV['SESSION_SECRET'] for production.