Fix codeclimate security issues

Session secret is not in the envs data bag. Please check it's set right when you CR this!