Adding SESSION_SECRET settings to the broker and console / minor v2 cart stuff

For the v2 carts we needed to run oo-admin-cartridge.