Encourage the use of a unique secret token.

Here's a one-liner for setting the app's session secret.