Moving away from MemoryStore, putting session secret as a production environment variable.