No longer letterboxed on iPhone 5 and safely fails if secret is changed

The page would be letterboxed if it were opened from the home screen on an iPhone 5. This is no longer the case.
If the secret key in secrets.rb were changed but a cookie with credentials were stored at the user, the page will give a 500 internal server error because `decrypt` would fail. If this is the case now, nil is returned.