<oo-accept-broker> Fix test for SESSION_SECRET

The test for SESSION_SECRET is testing against nil, and we are now
getting back an emtpy string when it is not defined in the config.