Adding SESSION_SECRET settings to the broker and console

These aren't really used today but we need to get users to stop using the
default rails secrets.

If these settings are missing a WARNING will be displayed in the log files.  oo-accept-broker will also report errors and show the user how to resolve the issue.