fetch secret token for signing cookies from config
Merge pull request #39 from azul/feature/keep-session-secret

fetch secret token for signing cookies from config