Adding SESSION_SECRET settings to the broker and console

These aren't really used today but we need to get users to stop using the
default rails secrets.
Merge pull request #1789 from brenton/master

Adding SESSION_SECRET settings to the broker and console