Read the session cookie store key from the environment

Read the session cookie store key from the environment, defaulting to what is set in .env. It'll work OOTB in development and require a single command before working on heroku.