Add the rack-ssl dependency.
Enforce SSL with rack-ssl if the SSL environment variable is set.
Use the SESSION_SECRET environment variable for the rack session secret.