Don't store secret keys in the repository

Storing secret session keys in the repository is a huge security issue.
We're now using environment variables for it. In production, we'll need to define `SECRET_KEY_BASE`.