Make session secret configurable

Fixes Issue #27.

Waiting for deployment to finish before I can test.