get session secret from environmental variables or randomized based on time