Clarify that the session secret token is set on rollout
Add htmlentities to main gemfile
Revert "Clarify that the session secret token is set on rollout"

This reverts commit 8e5ca7142ef91429b70a32779181b8e2029fabf9.