Dynamic secret_token, updated ignore

Encrypt session variables, use dynamic secret token. Fixed .gitignore to
ignore .secret files. README.md reverted to Earl's standard version from
my trial.

[Babby's First Commit]