Get config from environment variables first.
Add a Heroku Procfile
Check environment variables for session secret, too.
Remove config.json
Update README to mention config.
.gitignore: ignore config.json