Fix security issues spotted by codeclimate

env var for session secret has been added to chef production data bag (but please check it)