Moved session secret to non-commited file
Added mongodb as db backend