Pull the secret token out from the environment, so we can set it easily in server envs.
Merge pull request #63 from carbonfive/features/secret_token_from_env

Read the session cookie store key from the environment.