update default host for mailer
explode early if session secret is not set in production mode

Resolves #106
Merge pull request #110 from theodi/bugfix-106-session-secret

Explode if session secret isn't set